This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/1-orLpEPEs0pgT7FpYR_WYjCKwWs.roa File: 1-orLpEPEs0pgT7FpYR_WYjCKwWs.roa (raw, json) Hash identifier: n5Ym14rFpr095FaL9IAhfRYei5cEd9AMJCR8kIq3vSc= Subject key identifier: FA:8A:CB:A4:43:C4:B3:4A:60:4F:B1:69:61:1F:D6:62:30:8A:C1:6B Certificate issuer: /CN=59d590e2cc14cad844aef15ad5f2d467de8a37fe Certificate serial: 019B7910D9781E7E5A1E3C2E71F5A276588E Authority key identifier: 59:D5:90:E2:CC:14:CA:D8:44:AE:F1:5A:D5:F2:D4:67:DE:8A:37:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/1-orLpEPEs0pgT7FpYR_WYjCKwWs.roa Signing time: Thu 01 Jan 2026 10:18:25 +0000 ROA not before: Thu 01 Jan 2026 10:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47870 IP address blocks: 93.174.168.0/24 maxlen: 24 93.174.169.0/24 maxlen: 24 93.174.170.0/24 maxlen: 24 93.174.171.0/24 maxlen: 24 93.174.172.0/24 maxlen: 24 93.174.173.0/24 maxlen: 24 2a03:f400:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:d9:78:1e:7e:5a:1e:3c:2e:71:f5:a2:76:58:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59d590e2cc14cad844aef15ad5f2d467de8a37fe Validity Not Before: Jan 1 10:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa8acba443c4b34a604fb169611fd662308ac16b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5a:07:85:e2:fe:2f:e4:2a:cb:f9:cd:9c:a0: 34:ab:a9:cd:51:06:1f:13:0c:ac:3a:73:fb:2a:a6: 77:71:79:9d:33:79:76:a9:ef:a6:30:d0:3d:5a:6d: 5e:df:6a:64:e0:d0:1a:b4:ec:38:cc:df:31:95:42: c2:6a:8b:0c:54:2d:67:02:45:df:00:7a:07:6f:b5: 2f:95:cf:fc:77:14:0d:e0:50:69:ff:9c:e3:dd:ca: 55:66:5f:66:25:9e:15:a3:80:cd:42:6e:b0:80:02: bd:8a:81:dc:16:ea:5f:c2:8b:e4:b5:c0:2f:83:a3: d8:e9:61:84:1f:f6:2e:fe:72:1d:1d:01:7d:2a:7e: 03:ee:34:98:9c:9b:6b:41:b7:db:94:fb:0b:95:b3: 61:e4:65:6e:2f:d3:f3:1c:dd:59:0d:e3:d2:df:b5: 43:e7:70:73:0b:52:3c:d8:5b:25:fe:23:95:cd:e4: b0:49:76:dd:4c:9d:46:15:79:89:d1:fc:03:ff:a4: 33:f1:50:66:86:ae:e9:c9:64:26:f1:70:db:d9:ec: 06:38:cf:07:d7:03:8e:14:05:4f:42:ed:15:86:57: 5d:fb:da:16:14:5a:f0:c6:69:78:97:93:5e:be:0e: a3:48:e6:10:ad:e8:ff:62:78:b4:21:f1:25:d7:8b: 37:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:8A:CB:A4:43:C4:B3:4A:60:4F:B1:69:61:1F:D6:62:30:8A:C1:6B X509v3 Authority Key Identifier: keyid:59:D5:90:E2:CC:14:CA:D8:44:AE:F1:5A:D5:F2:D4:67:DE:8A:37:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/1-orLpEPEs0pgT7FpYR_WYjCKwWs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.174.168.0-93.174.173.255 IPv6: 2a03:f400:3::/48 Signature Algorithm: sha256WithRSAEncryption 86:91:49:60:47:cc:30:01:66:87:dc:c8:96:d5:0b:fd:83:22: 86:73:29:f3:57:86:07:70:8b:b0:b0:f8:4e:54:68:40:eb:f1: 71:c9:00:3c:40:f3:02:51:31:b1:16:c0:a2:7a:70:50:84:1b: 12:eb:97:5b:66:57:15:6a:2a:cf:9f:11:5b:c4:6e:6d:ee:af: 32:69:c7:09:f3:0f:d3:0f:f1:0b:da:b2:6b:da:85:39:b1:09: ca:c6:bb:57:1a:86:4f:a1:d9:c7:06:68:08:0e:ea:ce:e4:82: 1c:c4:df:d5:58:6c:6f:9b:6e:a8:9e:38:78:47:39:11:9b:c1: a7:d0:98:20:5f:5b:f8:25:bd:d9:06:c2:cb:ad:2a:93:81:e8: 12:14:05:d3:b2:94:1d:8c:31:91:5e:be:75:eb:93:32:a4:5a: d3:a9:35:9b:cb:10:8c:f2:7b:90:dd:14:ce:b1:cb:cc:c4:df: 5c:10:e8:16:51:d5:63:ea:12:53:be:e6:e0:21:6d:5a:8b:90: 7f:3a:3b:3e:7d:98:7c:1f:07:02:84:76:b9:9c:72:3d:fc:16: 71:9a:d1:d4:cf:ba:bc:9c:53:c5:8a:85:2f:1e:92:62:da:5a: a3:29:cf:7e:9e:02:08:91:79:66:ed:8e:ff:0b:98:b3:39:43: 81:1d:b6:a7 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt5ENl4Hn5aHjwucfWidliOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZDU5MGUyY2MxNGNhZDg0NGFlZjE1YWQ1ZjJkNDY3ZGU4 YTM3ZmUwHhcNMjYwMTAxMTAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYThhY2JhNDQzYzRiMzRhNjA0ZmIxNjk2MTFmZDY2MjMwOGFjMTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0loHheL+L+Qqy/nNnKA0q6nNUQYf EwysOnP7KqZ3cXmdM3l2qe+mMNA9Wm1e32pk4NAatOw4zN8xlULCaosMVC1nAkXf AHoHb7Uvlc/8dxQN4FBp/5zj3cpVZl9mJZ4Vo4DNQm6wgAK9ioHcFupfwovktcAv g6PY6WGEH/Yu/nIdHQF9Kn4D7jSYnJtrQbfblPsLlbNh5GVuL9PzHN1ZDePS37VD 53BzC1I82Fsl/iOVzeSwSXbdTJ1GFXmJ0fwD/6Qz8VBmhq7pyWQm8XDb2ewGOM8H 1wOOFAVPQu0Vhldd+9oWFFrwxml4l5Nevg6jSOYQrej/Yni0IfEl14s3EQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFPqKy6RDxLNKYE+xaWEf1mIwisFrMB8GA1UdIwQY MBaAFFnVkOLMFMrYRK7xWtXy1Gfeijf+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2RXUTRzd1V5dGhFcnZGYTFmTFVaOTZLTl80LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8yZmE3MDctZGFkNi00Zjk1LWI1ZGUt ZmM5OWQzM2QzMzQ0LzEvMS1vckxwRVBFczBwZ1Q3RnBZUl9XWWpDS3dXcy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYzYvMmZhNzA3LWRhZDYtNGY5NS1iNWRlLWZjOTlkMzNkMzM0 NC8xL1dkV1E0c3dVeXRoRXJ2RmExZkxVWjk2S05fNC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA4BggrBgEFBQcBBwEB/wQpMCcwFAQCAAEwDjAMAwQDXa6o AwQBXa6sMA8EAgACMAkDBwAqA/QAAAMwDQYJKoZIhvcNAQELBQADggEBAIaRSWBH zDABZofcyJbVC/2DIoZzKfNXhgdwi7Cw+E5UaEDr8XHJADxA8wJRMbEWwKJ6cFCE GxLrl1tmVxVqKs+fEVvEbm3urzJpxwnzD9MP8QvasmvahTmxCcrGu1cahk+h2ccG aAgO6s7kghzE39VYbG+bbqieOHhHORGbwafQmCBfW/glvdkGwsutKpOB6BIUBdOy lB2MMZFevnXrkzKkWtOpNZvLEIzye5DdFM6xy8zE31wQ6BZR1WPqElO+5uAhbVqL kH86Oz59mHwfBwKEdrmccj38FnGa0dTPurycU8WKhS8ekmLaWqMpz36eAgiReWbt jv8LmLM5Q4Edtqc= -----END CERTIFICATE-----Generated at Sun Jan 11 07:40:00 2026 by rpki-client